Senior Manager – Application Security Engineering

This is a fully remote position, open to applicants in Connecticut, +4 more states.

📋 Description

• Spearhead the design, implementation, and governance of enterprise application security initiatives, secure development standards, and software supply chain security practices.

• Define security requirements, establish security definitions of done, create launch readiness criteria, and implement automated controls that facilitate secure software delivery across cloud-native, hybrid, and legacy environments.

• Promote the adoption of secure coding practices and developer-centric security capabilities throughout enterprise engineering teams.

• Manage the complete vulnerability management lifecycle, encompassing identification, prioritization, remediation, exception management, validation, and reporting.

• Develop operational metrics, service level objectives, governance processes, and executive reporting mechanisms that foster accountability and measurable risk reduction.

• Lead enterprise response initiatives for critical and zero-day vulnerabilities, including risk assessment, stakeholder communication, remediation coordination, and executive reporting.

• Encourage the adoption of modern security technologies and DevSecOps capabilities, such as SAST, SCA, container security, secrets management, software bill of materials (SBOM), and software supply chain security solutions.

• Oversee the automation of security controls within CI/CD pipelines to enhance operational efficiency, strengthen risk mitigation, and expedite secure software delivery.

• Evaluate, implement, and optimize application security, cloud security, and software supply chain security technologies within on-premises, cloud, and hybrid environments.

• Investigate and adopt emerging technologies, including AI-driven security and developer productivity solutions, that enhance security outcomes and operational efficiency.

• Lead and nurture a high-performing team of security professionals, promoting a culture of technical excellence, accountability, innovation, and continuous improvement.

• Build and scale security programs that encourage developer adoption, self-service security capabilities, and DevSecOps maturity within enterprise engineering teams.

⛳️ Requirements

• A minimum of 7 years of experience in developing, implementing, and managing enterprise security technologies across Application Security, Container Security, Data Security, Infrastructure Security, or similar cybersecurity domains.

• At least 7 years of experience directing security programs and initiatives from initial design and implementation through to operationalization and ongoing improvement in enterprise environments.

• Over 5 years of experience securing cloud-native and modern application environments using AWS, Azure, or GCP, including containers, Kubernetes, Infrastructure-as-Code (IaC), and Security-as-Code methodologies.

• More than 5 years of experience supporting secure software development lifecycle (SDLC) programs, vulnerability management, security testing, regulatory compliance, and enterprise application portfolios.

• A minimum of 4 years of experience with application security technologies such as SAST, SCA, CVA, mobile application security testing, secrets scanning, software supply chain security, and developer enablement initiatives.

• At least 2 years of experience leading, mentoring, managing, and developing teams in security engineering, application security, vulnerability management, or cybersecurity.

🏝️ Benefits

• Medical, dental, and vision coverage

• Paid time off

• Retirement savings options

• Wellness programs

• Comprehensive benefits package